Privacy Policy

We take the security of your personal information very seriously. This policy explains what data we collect, why we collect it, and the rights you have over it.

1. Who We Are (The Data Controller)

Lunapa is owned and operated by Finest Luxe BV, which is the data controller responsible for processing your personal information on this website.

• Registration Company: Finest Luxe BV
• Address: Hoendiep 160, 9745 EA, Groningen
• Email: info@lunapa-official.com
• Phone: +31622433595

2. Information We Collect

We only collect data necessary to provide our services and fulfill our obligations. This may include:

• Order Information: Your name, shipping/billing address, email, phone number, and transaction details required for payment processing.

• Account Details: Information related to your user profile, if you create one.

• Website Usage Data: Technical information like your IP address, browser type, device type, and how you interact with our site (collected via consent).

• Marketing Data: Email address and preferences, only if you have explicitly consented to receive our newsletter.

3. Why We Process Your Data (Purposes and Legal Grounds)

We process your data based on specific legal grounds for the following essential purposes:

• Fulfilling Orders: Performance of a Contract [Art. 6(1)(b)]
• Legal Compliance: Legal Obligation (Tax, Accounting) [Art. 6(1)(c)]
• Communication & Support: Performance of a Contract [Art. 6(1)(b)]
• Website Security & Fraud Prevention: Legitimate Interest [Art. 6(1)(f)]
• Analytics & Marketing: User Consent [Art. 6(1)(a)]

4. How We Share Your Data

We only share data when it is necessary to complete your order or run our services efficiently. Recipients may include:

• Payment Providers: To securely process your transactions.

• Logistics Companies: To deliver your items.

• IT & Hosting Providers: To maintain the website and secure data storage.

• Platform Provider: Our platform may be powered by third-party e-commerce providers such as Shopify. Please review their privacy policies for details regarding their data handling practices.

5. Payments and Security

When you pay directly, your transaction data is handled according to strict PCI-DSS security standards. We only retain payment details for as long as needed to complete the transaction and meet our legal accounting requirements.

6. Analytics and Cookies

• Analytics: We may use Google Analytics (with anonymized IP addresses) to understand website traffic. This is based entirely on your consent, which you grant via the cookie banner.

• Cookies: Our site uses cookies for essential functions (like your shopping cart). Analytical and marketing cookies are only used with your permission.

• Manage Consent: You can withdraw or change your consent for cookies and analytics at any time through the cookie settings available on the banner.

7. Data Security and Retention

• Security: We protect all data using SSL/TLS encryption during transmission and store it on secure servers. We maintain stringent technical and organizational security measures in compliance with applicable GDPR regulations.

• Retention: We only keep your data for as long as necessary to fulfill the purposes outlined here or as required by tax, accounting, or legal obligations. Once that period expires, the data is securely deleted or anonymised.

8. Your Data Rights

Under the GDPR, you have full control over your personal data. You have the right to:

• Access: View the information we hold about you.

• Rectification: Correct any inaccurate or incomplete data.

• Erasure: Request the permanent deletion of your data (“Right to be Forgotten”).

• Restriction: Limit how we process your data.

• Portability: Receive your data in a portable format.

• Objection: Object to processing based on legitimate interest.

• Withdraw Consent: Revoke consent for processes based on your permission (e.g., marketing).

To exercise any of these rights, please contact us directly at info@lunapa-official.com.

9. International Transfers

If your data must be transferred outside the UK or EEA, we guarantee that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other legally approved mechanisms, are in place to ensure compliance with applicable data protection laws.

10. Policy Updates

We may update this policy occasionally to reflect changes in law or service offerings. The most current version will always be posted on our website. We will notify you of any significant updates where legally required.